Re: [snort-inline-users] Kernel space

[Rob M. <ro...@ho...>]

Thought about it, but it seems like a very large project.

I figured it could be similar to iptables.  The rules portion lives on=20
userspace and the functionality lives in kernel space.  The user builds=20
the rules which are parsed in user land and this data is passed to the=20
kernel.  However, I do all of this part time, and I haven't had much time=
=20
as of late to think about this.

Many people out there with time to move this to kernel space?

I will be integrating and posting Williams patches and upgrades soon. =20
Just got back from traveling and trying to take care of some personal=20
dilemmas I am encountering.  Thanks William

Rob

On Wed, 16 Jun 2004, [ISO-8859-1] C=E9dric BLIN wrote:

> Date: 16 Jun 2004 16:47:54 +0200
> From: "[ISO-8859-1] C=E9dric BLIN" <ced...@ev...>
> To: sno...@li...
> Subject: [snort-inline-users] Kernel space
>=20
> Hello,
>=20
> I want to know if someone have already though to migrate Snort into the
> kernel space ?
>=20
> Thanks,
> Cedric
>=20
> --=20
>=20
>=20
>=20
> -------------------------------------------------------
> This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
> Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer
> Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA
> REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND
> _______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
> https://lists.sourceforge.net/lists/listinfo/snort-inline-users
>=20